commit:     2b74ebc7f2769c6d8b6b4a32b240824fbd6a8698
Author:     Brian Harring <ferringb <AT> gmail <DOT> com>
AuthorDate: Sun Nov  9 12:38:39 2025 +0000
Commit:     Brian Harring <ferringb <AT> gmail <DOT> com>
CommitDate: Sun Nov  9 12:38:39 2025 +0000
URL:        
https://gitweb.gentoo.org/proj/pkgcore/snakeoil.git/commit/?id=2b74ebc7

chore: add protection to release blocking any vcs dep

Signed-off-by: Brian Harring <ferringb <AT> gmail.com>

 .github/workflows/release.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2deb978..e5cf117 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,6 +19,16 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v4
 
+    - name: Reject any VCS dependencies
+      shell: python
+      run: |
+        import re, tomllib
+        deps = tomllib.load(open('pyproject.toml', 
'rb'))['build-system']['requires']
+        if rejects := list(filter(re.compile(r'@[^+]+').search, deps)):
+          rejects = "  \n".join(sorted(rejects))
+          raise Exception(f'VCS dependencies were detected in 
[build-system]:\n  {rejects}')
+
+
     - name: Set up Python 3.13
       uses: actions/setup-python@v5
       with:

Reply via email to